> That's a very small amount of ram. Is it using any swap?
Nope. Top says:

top - 23:01:40 up 31 days,  2:06,  1 user,  load average: 0.10, 0.04, 0.01
Tasks:  52 total,   2 running,  50 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.0%us,  0.0%sy,  0.0%ni,100.0%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:    125000k total,    89580k used,    35420k free,     3032k buffers
Swap:   265064k total,    23460k used,   241604k free,    24452k cached


----- Original Message -----
From: "compdoc" <comp...@hotrodpc.com>
To: efw-user@lists.sourceforge.net
Sent: Friday, March 27, 2009 10:37:20 PM GMT +01:00 Amsterdam / Berlin / Bern / 
Rome / Stockholm / Vienna
Subject: Re: [Efw-user] Snort CPU load limits download speed

That's a very small amount of ram. Is it using any swap?

I have snort enabled on a couple of efw servers and I never
hear from it - no warnings, info, etc. Maybe I'm not
important enough to hack...



-----Original Message-----
From: Bart Heinsius [mailto:bheins...@gmail.com] 
Sent: Friday, March 27, 2009 3:25 PM
To: efw-user@lists.sourceforge.net
Subject: [Efw-user] Snort CPU load limits download speed

Hi,

I have a 30mbps symmetric internet link attached to the red
interface of my Endian 2.2RC3 firewall running in a Xen VM
on a Dell R200 Quad Core X3230, 2.66GHz/2x4M 1066FSB. The
Endian VM has 1 processor and 128MB memory allocated.

I noticed that my download speed is around 20mbps max
instead of the 30mbps the link provides. On the Endian
machine I see that snort takes nearly 100% when downloading.
When I disable snort the CPU load is back to 0 and my
download speed is back to 30mbps.

Is it normal for snort to use that much CPU?
Is there a way to reduce the amount of CPU snort uses?
Do I need snort?

-Bart



------------------------------------------------------------------------------
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to